Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8AB02931D76016C1DAC971891EFEB5791057829F.cer
File:                     8AB02931D76016C1DAC971891EFEB5791057829F.cer (raw, json)
Hash identifier:          MYsL6IKhbMWHunXgpiw4QibfN7umqbgpzINsvmaFw6Y=
Subject key identifier:   8A:B0:29:31:D7:60:16:C1:DA:C9:71:89:1E:FE:B5:79:10:57:82:9F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7F9ADEE7F45197B627F9E24C790009C96E782BDA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/8AB02931D76016C1DAC971891EFEB5791057829F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 09 Oct 2023 19:09:36 +0000
Certificate not after:    Mon 07 Oct 2024 19:14:36 +0000
Subordinate resources:    AS: 265426
                          IP: 168.195.164.0/22
                          IP: 2804:33f0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:9a:de:e7:f4:51:97:b6:27:f9:e2:4c:79:00:09:c9:6e:78:2b:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  9 19:09:36 2023 GMT
            Not After : Oct  7 19:14:36 2024 GMT
        Subject: CN=8AB02931D76016C1DAC971891EFEB5791057829F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:00:90:e0:e0:f4:db:b8:90:a0:28:8c:88:2e:
                    87:1c:d3:13:b0:bd:95:e3:6d:5f:73:f7:4e:7b:25:
                    3b:27:9b:4f:75:b9:42:d4:2e:b2:ff:dd:62:c1:e5:
                    a3:a5:7a:96:f2:37:b2:43:be:40:59:51:fe:a5:f3:
                    91:c5:e6:43:f1:eb:d7:22:00:75:45:3f:0f:4f:61:
                    eb:3f:7a:ef:f2:2d:b7:d9:6b:1b:3b:a8:47:c4:43:
                    15:7e:f6:fb:5e:df:06:56:42:fd:3f:67:f9:14:b6:
                    c8:11:4b:57:71:f1:b6:33:67:83:db:02:2e:64:c3:
                    14:6d:81:90:5c:b7:17:3e:9f:48:f4:ae:01:fe:a8:
                    14:47:af:78:6a:27:d3:63:07:96:6a:bd:48:6a:84:
                    24:10:ae:9a:05:f9:97:1f:b0:d3:40:db:e6:9d:26:
                    be:28:af:7a:36:42:23:da:91:b5:45:e6:4b:0c:d5:
                    30:22:42:f5:fb:77:aa:83:67:83:d9:06:c1:2a:da:
                    ea:7e:14:68:ed:4d:f0:7a:3f:18:32:06:95:79:b3:
                    a0:6d:5c:8f:0f:1a:7d:1f:f1:08:c4:46:e7:d4:63:
                    08:37:8f:65:c6:36:0c:65:01:59:81:d9:e3:a2:53:
                    0c:9d:10:85:54:4f:8e:ab:2a:2c:5e:b0:a2:8b:bb:
                    c1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:B0:29:31:D7:60:16:C1:DA:C9:71:89:1E:FE:B5:79:10:57:82:9F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/8AB02931D76016C1DAC971891EFEB5791057829F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.164.0/22
                IPv6:
                  2804:33f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265426

    Signature Algorithm: sha256WithRSAEncryption
         35:b1:f9:53:c8:99:73:8a:bc:e9:fd:a5:2a:2f:33:7e:f0:f8:
         ae:f6:8c:86:18:a9:ae:01:62:a8:97:97:c0:75:18:64:08:a4:
         1c:8c:71:bc:27:8e:83:2e:75:37:fa:ff:75:e7:f7:36:02:31:
         ae:d0:22:d1:66:34:93:db:2c:b1:d1:d4:30:29:4c:9e:75:78:
         e7:68:04:1f:b4:8a:f8:f8:14:b1:2e:50:31:52:d1:4c:c4:ef:
         4e:73:7c:11:34:8e:7a:e2:76:9c:ee:02:47:32:cc:7a:f5:aa:
         0d:71:34:9f:55:1e:44:38:f2:7e:87:90:20:27:23:48:c7:de:
         fe:72:53:31:be:cf:19:3d:51:4e:78:21:69:ae:6e:9b:d7:8a:
         57:68:cf:73:c8:b2:b5:9f:2a:d7:7f:42:c2:16:0c:98:f2:a9:
         69:63:63:b8:8b:4b:2c:bb:4d:61:94:ae:43:49:97:ed:58:66:
         9d:7b:bf:df:2c:25:49:ed:fb:04:ff:31:9e:60:87:4a:54:3f:
         2f:ed:aa:d4:e3:2c:0c:ab:ca:3d:76:76:1c:de:83:f7:52:e5:
         49:04:08:38:15:b3:dd:72:b1:19:89:91:8e:df:df:90:47:9b:
         9a:eb:93:ca:fc:aa:90:ab:0e:de:ee:15:ef:bf:60:86:58:31:
         29:e1:45:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org